Intune (device management)

What it is

Microsoft describes Intune as a cloud-based endpoint management service. It enrols devices, configures and secures them, deploys and protects apps, keeps them updated and controls which users and devices can reach company data. It works on Windows, macOS, iOS and iPadOS, Android and Linux, with nothing to install on your own servers.

Intune works in two ways, separately or together:

• Mobile device management (MDM) manages the whole device. It suits company laptops and phones, and lets you wipe a lost or stolen device.
• Mobile application management (MAM) manages only the work apps and the data inside them. It suits personal phones: work data stays protected inside Outlook and Teams, and can be wiped when someone leaves without touching their photos.

Why it matters for a UK small business

MFA proves who is signing in. It says nothing about the laptop they are using. Without device management, client files can end up on an unencrypted home PC that hasn’t been updated in months. Several of the Cyber Essentials controls, including secure configuration, security updates and malware protection, are much easier to meet and to evidence when devices are managed centrally.

How it works in Microsoft 365

Intune relies on Microsoft Entra ID for sign-in and for the groups you assign policies to. A typical set-up for a small business is:

1. Enrol company devices
2. Apply a baseline: encryption on, screen lock, updates installed, Defender running
3. Use a compliance policy to define what a healthy device looks like
4. Add a Conditional Access policy so only compliant devices can open company data
5. Use app protection policies for personal phones

Intune sends each device’s compliance state to Entra, and Conditional Access uses it in the sign-in decision. Device management is part of Microsoft 365 Business Premium, and each managed user or device needs an Intune licence.

How &DEV helps: the Microsoft 365 MOT enrols your devices, sets the baseline and links it to Conditional Access, and our service plan keeps new laptops in line.